273701a5b2
evmctl provides signing support for IMA/EVM. Functionality includes signing of file content (IMA), file metadata (EVM), importing public keys into kernel keyring. Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>
16 lines
279 B
Bash
Executable File
16 lines
279 B
Bash
Executable File
#!/bin/sh
|
|
|
|
verbose=""
|
|
if [ "$1" = "-v" ] ; then
|
|
verbose="-v"
|
|
shift 1
|
|
fi
|
|
|
|
dir=${1:-/lib/modules}
|
|
|
|
echo "Signing modules: $dir"
|
|
|
|
find $dir -name "*.ko" -type f -uid 0 -exec evmctl sign --imasig '{}' \;
|
|
find $dir ! -name "*.ko" -type f -uid 0 -exec evmctl sign --imahash '{}' \;
|
|
|